57f6dbc4d6b680cfc1efb711e71be666540572c77e93555a246239227d463367

General

Target
57f6dbc4d6b680cfc1efb711e71be666540572c77e93555a246239227d463367
Size 414KB
Sample240903-rmrtjazfrc
SHA256 57f6dbc4d6b680cfc1efb711e71be666540572c77e93555a246239227d463367
MD5 2b67e390e0b1d03d9b6e99d0271b8883
SHA1 3c5dbe4222c43bbb6c8065142eb660a9c07af33e
SHA512 c040572536f174f22dd20308c754ee81fdb5fafe99f555575227113e7fdb67462eba5ecadbf645c2f6f6798b15d64b7950774d3d2340db76c06764210c26576b
SSDEEP 3072:DaX5P74gWHs72AQo6ssNJb1SyLhzmqSWCXwwQS7tbdi2lA7MJZ4899kbKn4yixxb:W5jpWHs720fO0ysHR02lAMp9iK4dMt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57f6dbc4d6b680cfc1efb711e71be666540572c77e93555a246239227d463367

File Explorer

57f6dbc4d6b680cfc1efb711e71be666540572c77e93555a246239227d463367

.exe 414KB

57f6dbc4d6b680cfc1efb711e71be666540572c77e93555a246239227d463367

IMPHASH 18c0667cdc8c956a0a9c2176bfe124ba
SHA256 57f6dbc4d6b680cfc1efb711e71be666540572c77e93555a246239227d463367
MD5 2b67e390e0b1d03d9b6e99d0271b8883
SHA1 3c5dbe4222c43bbb6c8065142eb660a9c07af33e
SHA512 c040572536f174f22dd20308c754ee81fdb5fafe99f555575227113e7fdb67462eba5ecadbf645c2f6f6798b15d64b7950774d3d2340db76c06764210c26576b
SSDEEP 3072:DaX5P74gWHs72AQo6ssNJb1SyLhzmqSWCXwwQS7tbdi2lA7MJZ4899kbKn4yixxb:W5jpWHs720fO0ysHR02lAMp9iK4dMt
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

26968

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW CreateJobObjectW InterlockedCompareExchange UnlockFile CreateHardLinkA GetTickCount CreateNamedPipeW FindNextVolumeMountPointA SetCommState GlobalAlloc LoadLibraryW GetCalendarInfoA SetVolumeMountPointA GetSystemWindowsDirectoryA GetConsoleAliasExesLengthW GetFileAttributesW GetModuleFileNameW CreateActCtxA GetThreadPriorityBoost VerifyVersionInfoW GetLogicalDriveStringsA SetLastError GetProcAddress GetConsoleDisplayMode GetProcessVersion InterlockedExchangeAdd CreateFileMappingW SetDefaultCommConfigW CreateEventW OpenEventA GlobalWire EnumDateFormatsA EnumResourceNamesA VirtualProtect GetCurrentDirectoryA WaitForDebugEvent PeekConsoleInputA GetShortPathNameW SetProcessShutdownParameters SetFileShortNameA GetDiskFreeSpaceExA ReadConsoleInputW GetTempPathA EnumCalendarInfoExA LocalFree TlsFree LCMapStringW CommConfigDialogW RtlUnwind HeapSize RaiseException GetStringTypeW Sleep GetCurrentProcess SetEndOfFile GetConsoleAliasExesA GetNumberFormatW GetLocaleInfoA MultiByteToWideChar GetLastError HeapFree HeapReAlloc GetModuleHandleW ExitProcess DecodePointer GetCommandLineA HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer TerminateProcess GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCurrentThreadId HeapAlloc IsProcessorFeaturePresent HeapCreate InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection WriteFile GetStdHandle GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime

user32

LoadMenuW CharUpperW GetSysColor GetMenuStringA GetCaretPos SetMenu DrawStateA

gdi32

GetCharWidthFloatA CreateDCW GetCharWidth32A GetBitmapBits

Sharing

General

Malware Config

Signatures

File Explorer

57f6dbc4d6b680cfc1efb711e71be666540572c77e93555a246239227d463367

kernel32

user32

gdi32

generic